ICSB CS Professional common mistakes
ICSB CS Professional · Understand the traps and how to avoid them.
When answering questions on board composition, the candidate automatically treats 'independent director' and 'non-executive director' as synonyms, ignoring the separate criteria for independence (e.g., no material relationship, no former employment) and choosing the answer that merely says 'non-executive'.
Everyday usage and much media coverage conflate the two terms, and candidates rely on that familiarity instead of the exam's formal definition. Under time pressure they pattern-match the familiar phrase rather than applying the specific independence tests, and they fail to notice that an option describes a non-executive director who still has a disqualifying relationship (e.g., a former CEO within the cooling-off period).
What to do instead
Before the exam, write a one-page comparison of non-executive versus independent status with the concrete criteria (no material business relationship, no recent employment, no close family ties, no long tenure beyond the limit). In practice, when a question mentions independence, circle the relationship facts in the stem and eliminate any option whose director fails one of them, even if the option calls the director 'non-executive'.
The candidate answers procedural questions (e.g., notice periods for meetings, quorum, written resolutions, dividend declaration) from general memory of how their own company does things, rather than from the statutory or constitutional rule the question tests, and picks the 'usual practice' option.
Experienced practitioners internalise their own organisation's conventions (e.g., 14 days' notice, a quorum of two) and unconsciously treat them as universal. Exam questions often deliberately set a fact pattern where the company's articles or the applicable statute differ from common practice, and the familiar answer is a distractor.
What to do instead
Build a one-page table of the key default statutory rules (notice periods, quorum, majority thresholds, resolution types) and note explicitly where model articles or the company's constitution can vary them. In the exam, read the stem for the governing document or jurisdiction stated, and answer from that source, not from your own company's habit.
In questions about statutory registers and records, the candidate selects the answer that lists only the obvious registers (members, directors) and overlooks the less familiar ones (e.g., register of charges, register of people with significant control, minutes of board and general meetings, directors' service contracts), or misstates where and for how long records must be kept and who may inspect them.
Candidates study the headline registers and skim the record-keeping provisions, which are detailed and easy to conflate. The inspection and retention rules differ by record type and jurisdiction, so candidates generalise one rule (e.g., 'kept at the registered office for 10 years') across all records.
What to do instead
Create a matrix with one row per record type and columns for location, retention period, inspection rights, and whether copies may be charged for. Test yourself by covering columns and recalling them. In the exam, when a question names a specific record, answer only from that row rather than from a general retention rule.
The candidate treats a corporate governance code as if it were a statute, choosing answers that say a company 'must' comply with a particular code provision, or that a breach of the code is itself unlawful, instead of recognising the 'comply or explain' nature of most codes.
The exam spans both law and codes, and candidates blur the two. Codes are often written in mandatory-sounding language ('the board should...'), and candidates who have memorised provisions without their status misclassify them. The distinction between legal obligation and code expectation is exactly what the question is testing.
What to do instead
For each code you study, write at the top of your notes whether it is statutory, listing-rule-based, or voluntary, and what the consequence of non-compliance is (explain, disclose, or nothing). In the exam, when an option says 'must' or 'illegal', check whether the source named in the stem is a statute or a code before selecting it.
In risk and internal control questions, the candidate identifies the risk correctly but then selects a control that is actually a detective control when the question asks for prevention (or vice versa), or recommends 'more training' or 'stronger tone at the top' as the control for a specific financial or operational risk where a concrete control activity is required.
Candidates learn control categories as definitions but do not practise classifying real controls. Generic cultural answers feel safe and are overused, and under time pressure candidates choose the option that sounds most governance-minded rather than the one that matches the control objective in the stem.
What to do instead
Drill a list of 30 concrete controls and label each as preventive, detective, or corrective, and as manual or automated. In the exam, first identify the control objective stated in the stem (prevent, detect, correct), then eliminate any option from the wrong category before considering which is best.
When a question involves a conflict of interest, a related-party transaction, or a gift and hospitality scenario, the candidate applies the general ethical principle ('act with integrity') and stops there, rather than applying the specific procedural steps (declare the interest, withdraw from the discussion and vote, record it in the minutes, follow the conflicts policy and, where required, obtain board or shareholder approval).
Candidates prepare ethics as values and slogans rather than as procedures. The 'right' answer feels obvious once integrity is mentioned, so candidates stop reading and miss the option that sets out the full correct process, or they choose a noble-sounding but procedurally wrong action such as 'resign from the board'.
What to do instead
Memorise a standard conflict-handling sequence (identify, disclose to the right body, recuse from discussion and decision, record, escalate or seek approval where required) and apply it to every scenario. In the exam, reject options that skip disclosure or recusal, and prefer the option that follows the full sequence in the correct order.
In shareholder relations questions, the candidate equates good engagement with holding the annual general meeting and publishing the annual report, and overlooks the specific engagement mechanisms (investor roadshows, results presentations, proxy and voting dialogue, dedicated investor contact, disclosure of engagement activity, responding to shareholder resolutions) that the question is probing.
The statutory minimum (AGM plus annual report) is well known and easy to recall, so it becomes the default answer. Candidates under-prepare the softer engagement side of the syllabus because it feels less examinable than the legal rules, and they miss options describing two-way, ongoing engagement.
What to do instead
Build a two-column list: 'minimum legal communication' versus 'active engagement'. For each engagement mechanism, note its purpose and who leads it. In the exam, when a question asks how a board should engage or respond, prefer the option describing ongoing, two-way, disclosed dialogue over one describing a one-off statutory event.
The candidate answers questions about directors' duties by applying only one duty (e.g., 'act in good faith') and ignores the others (e.g., exercise reasonable care, skill and diligence; avoid conflicts; not accept benefits from third parties; declare interests in proposed transactions), or applies the business judgement rule as a blanket defence without checking its conditions.
The duties are studied as a list but remembered as a single idea of 'loyalty'. Scenario questions often turn on a second duty, such as the duty of care or the duty to declare an interest, and candidates who fixate on good faith pick an option that addresses only loyalty. The business judgement rule is similarly over-applied without its requirements (informed decision, no conflict, rational belief in the company's best interests).
What to do instead
For each duty, write one scenario and the specific breach it produces. In the exam, list all the duties that could apply to the facts before reading the options, then match the option that addresses the duty actually engaged. When the business judgement rule appears, verify each of its conditions against the stem before accepting it.
The candidate treats the company secretary's role as purely administrative, choosing answers in which the secretary merely takes minutes and files returns, and rejects options in which the secretary advises the board on governance, monitors compliance, or has a duty to escalate concerns.
The title 'secretary' suggests a clerical function, and candidates without boardroom exposure default to that stereotype. The syllabus, however, expects the secretary to be a governance professional with advisory and compliance-monitoring responsibilities, and questions are designed to test that fuller role.
What to do instead
Write a short description of the modern company secretary's role covering board support, governance advice, compliance monitoring, and the escalation of concerns, with examples. In the exam, when an option gives the secretary an advisory or monitoring function, treat it as plausible rather than dismissing it as 'not the secretary's job', and choose the option that reflects the governance professional model.
The candidate answers anti-corruption questions by focusing on the payment itself (e.g., 'the bribe was not paid, so no offence occurred') and overlooks the associated offences and compliance requirements: failure to prevent bribery, adequate procedures, facilitation payments, third-party and intermediary risk, books-and-records offences, and the need for due diligence and risk assessment.
Bribery is intuitively understood as handing over money, so candidates analyse the scenario only at that point. The extended offences and the compliance-defence requirements are technical and less familiar, and candidates do not connect the facts (e.g., use of an agent, inadequate records) to those provisions.
What to do instead
Map the anti-corruption framework onto a diagram: primary offences, corporate failure-to-prevent offence, the adequate-procedures defence and its components, and record-keeping obligations. In the exam, before answering, ask whether the facts engage an intermediary, a record-keeping issue, or the adequacy of the compliance programme, and select the option that addresses that specific element rather than only the payment.